Separate business records
The server checks the signed-in account and business before accessing business records. Customer portal access is restricted to the permitted customer and shared records.
DATA & SECURITY
Practical controls around your business records.
Separate business access, staff permissions and deliberate customer sharing, with clear information about where data is handled.
How access and data are protected
Roles and permissions
Owners manage team access. Staff need the appropriate permissions for jobs, financial information and other business tools. Field crew access follows their assignments.
Staff multi-factor authentication
Staff can enrol an authenticator in Account security and save single-use recovery codes. MFA requires verification before it becomes active; customer portal sign-in is separate.
Secure connections
The public application uses HTTPS. Managed database TLS with certificate verification is configured for the Sydney deployment target.
Hosting and overseas handling
The Product Privacy Notice describes application functions and the managed database in Sydney. Content delivery, email, payments, files on Cloudflare R2 and provider support can involve overseas processing. Australian-only storage and processing are not promised.
Activity and exports
Authorised users can review supported business activity and prepare scoped exports. Job evidence packages have size and access limits. Account closure offers a 30-day window for a supported export.
Backups and retention
Availability, maintenance, incident handling and backups follow Vercel and Supabase's arrangements for the service plan Nenvik uses with them. Nenvik offers no separate uptime percentage, service credit, recovery-point or restore-time commitment. We use reasonable efforts to restore service and inform customers of significant incidents. The Product Privacy Notice does not promise a fixed backup-erasure date.
Security enquiries
Contact support@nenvik.com.au about a suspected issue. Do not send passwords, authenticator codes or private access links.
Read the Product Privacy Notice, Product Terms and account security guide for the full details.